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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on 12/24/2008 has been entered. 

Status of Claims 

2. Claims 1, 3-7, and 9-19 are pending in this Office Action. 
All independent claims arc amended. 

Claims 2 and 8 are previously canceled. 

3. Claims 1 and 16 have been fully considered for statutory reason and have been 
interpreted as statutory in light of applicant's disclosure page 9 line 7 wherein said "an input 
unit" is a key board and pointing device. 

Response to Amendment 

4. Applicant amends all independent claims and states, on the remark page 10, that "the 
amendments can be found in the original document" without specifically pointing out which 
page and what line the amendment is disclosed. The examiner herein verifies that the newly 
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amended limitation is not found in the disclosure, see for example figure 12 of the applicant's 
disclosure. 

Response to Arguments 

5. Applicant's arguments filed on 12/24/2008 have been fully considered but are moot in 
view of new grounds of rejection. 

Claim Rejections - 35 USC § 112 

6. The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of making 
and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and use the same and shall set forth the best mode 
contemplated by the inventor of carrying out his invention. 

7. Claims 1, 3-7, and 9-19 are rejected under 35 U.S.C. 1 12, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject matter which 
was not described in the specification in such a way as to reasonably convey to one skilled in the 
relevant art that the inventor(s), at the time the application was filed, had possession of the 
claimed invention. The newly amended limitation "not to invalidate the first authentication 
mechanism if it has not been verified by the verification unit that the authentication of the object 
of authentication in the second authentication mechanism succeeds" cannot be found in the 
applicant's disclosure. Please see fig. 12 for example. 

Claim Rejections - 35 USC §101 

8. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 
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9. Claims (7 and 9-15) are rejected under 35 U.S.C. 101 based on Supreme Court precedent 
and recent Federal Circuit decisions, a 35 U.S.C § 101 process must (1) be tied to a particular 
machine or (2) transform underlying subject matter (such as an article or materials) to a different 
state or thing. In re Bilski et al, 88 USPQ 2d 1385 CAFC (2008); Diamond v. Diehr, 450 U.S. 
175, 184 (1981); Parker v. Flook, 437 U.S. 584, 588 n.9 (1978); Gottschalk v. Benson, 409 U.S. 
63, 70 (1972); Cochrane v. Deener, 94 U.S. 780,787-88 (1876). 

An example of a method claim that would not qualify as a statutory process would be a 
claim that recited purely mental steps. Thus, to qualify as a § 101 statutory process, the claim 
should positively recite the particular machine to which it is tied, for example by identifying the 
apparatus that accomplishes the method steps, or positively recite the subject matter that is being 
transformed, for example by identifying the material that is being changed to a different state. 

Here, applicant's method steps are not tied to a particular machine and do not perform a 
transformation. Thus, the claims are non-statutory. 

The mere recitation of the machine in the preamble with an absence of a machine in the 
body of the claim fails to make the claim statutory under 35 USC 101 . Note the Board of Patent 
Appeals Informative Opinion Ex parte Langemyer et al. 

Claim Rejections - 35 USC §103 

10. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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11. Claims 1,5,6,7, 11, 12, 13, 14, 16, 17, and 19 rejected under 35 U.S.C. 103(a) as being 
unpatentable over US 6021496 (Dutcher) (Applicant's IDS) in view of Cheline et al. 
20030055990. 

As to claim 1, Dutcher discloses an authentication apparatus having a plurality of 
authentication mechanisms, characterized by comprising: an input unit adapted to input 
authentication information of an object of authentication, said authentication information having 
been already authenticated by a first mechanism that is in use (Dutcher column 5, lines 5-8 and 
column 20, lines 6-49); 

a determination unit adapted to determine whether the authentication information that has 
been input by said input unit corresponds to an object of authentication that has an authority to 
change over the first authentication mechanism in use to another authentication mechanism 
(Dutcher column 2, lines 55-64); 

a display control unit adapted to display a list of the plurality of authentication 
mechanisms if it has been determined by said determination unit that the authentication 
information that has been input corresponds to the object of authentication that has the authority 
to make the changeover (Dutcher column 3, lines 8-15); 

a registration unit adapted to register, as an effective authentication mechanism, an a 
second authentication mechanism that has been selected from the list displayed by said display 
control unit (Dutcher column 3, lines 16-23); 

a verification unit adapted to verify that authentication of the object of authentication in 
the second authentication mechanism succeeds (Dutcher column 20, lines 6-49); and 
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an invalidation unit adapted to invalidate the first authentication mechanism, if it has been 
verified by the verification unit that the authentication of the object of authentication in the 
second authentication mechanism succeeds (Dutcher column 11, lines 26-49). 

Dutcher fails to explicitly explain wherein not invalidate the first authentication 
mechanism if it has not been verified by the verification unit that the authentication of the object 
of authentication in the second authentication mechanism succeeds. 

However Cheline et al. discloses wherein not invalidate the first authentication 
mechanism if it has not been verified by the verification unit that the authentication of the object 
of authentication in the second authentication mechanism succeeds (see fig. 4a and 4b; when 
access is rejected at step 426, the user is allowed to re-enter and re-transmit user name and 
password i.e. step "F". But the system is not disconnecting all connections i.e. the system 
did not start over and require the user to re-request VPN or the VPN request i.e. step "H" 
is still on and the VPN request at step 402 is not invalidates when the access at step 426 is 
rejected.) 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to modify the teachings of Cheline et al. within the system of Dutcher 
because they are analogous in multiple corporate server user selection (see par. 0067 and fig. 3A 
element 310 and fig. 6 element 608). One would have been motivated to modify the teachings to 
provide the user the current service when the request for the second service is not valid. 

As to claim 7, Dutcher discloses the authentication method of changing over a plurality 
of authentication mechanisms and performing authentication with any one of said plurality of 
authentication mechanisms, comprising: 
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an input step of inputting authentication information of an object of authentication, said 
authentication information having been already authenticated by a first authentication 
mechanism that is in use (Dutcher column 5, lines 5-8); 

a determination step of determining whether the authentication information that has been 
input at said input step corresponds to an object of authentication that has an authority to change 
over the first authentication mechanism in use to another authentication mechanism (Dutcher 
column 2, lines 55-64); 

a display control step of displaying a list of the plurality of authentication mechanisms if 
it has been determined at said determination step that the authentication information that has 
been input corresponds to the object of authentication that has the authority to make the 
changeover (Dutcher column 3, lines 8-15); 

a registration step of registering, as an effective authentication mechanism, a second 
authentication mechanism that has been selected from the list displayed at said display control 
step (Dutcher column 3, lines 16-23); 

a verification step of verifying that authentication of the object of authentication in the 
second authentication mechanism succeeds (Dutcher column 20, lines 6-49); and 
an invalidation step of invalidating the first authentication mechanism, if it has been verified in 
the verification step that the authentication of the object of authentication in the second 
authentication mechanism succeeds (Dutcher column 11, lines 26-49). 

Dutcher fails to explicitly explain wherein not invalidating the first authentication 
mechanism if it has not been verified at the verification step that the authentication of the object 
of authentication in the second authentication mechanism succeeds. 
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However Cheline et al. discloses wherein not invalidating the first authentication 
mechanism if it has not been verified at the verification step that the authentication of the object 
of authentication in the second authentication mechanism succeeds (see fig. 4a and 4b; when 
access is rejected at step 426, the user is allowed to re-enter and re-transmit user name and 
password i.e. step "F". But the system is not disconnecting all connections i.e. the system 
did not start over and require the user to re-request VPN or the VPN request i.e. step "H" 
is still on and the VPN request at step 402 is not invalidates when the access at step 426 is 
rejected.) 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to modify the teachings of Cheline et al. within the system of Dutcher 
because they are analogous in multiple corporate server user selection (see par. 0067 and fig. 3A 
element 310 and fig. 6 element 608). One would have been motivated to modify the teachings to 
provide the user the current service when the request for the second service is not valid. 

As to claim 13, Dutcher discloses an authentication method comprising: 

an input step of inputting authentication information of an object of authentication 

(Dutcher column 5, lines 5-8); 

a first authentication step of authenticating whether an object of authentication has access 

right to a first system using the authentication information of the object of authentication that has 

been input at said input step, and allowing the object of authentication to access the first system 

if authentication succeeds (Dutcher Figure 4); 
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a second authentication step of authenticating whether the object of authentication has 
access right to a second system using the authentication information of the object of 
authentication that has been input at said input step, and allowing the object of authentication to 
access the second system if authentication succeeds (Dutcher column 5, lines 22-31); 

a control step of controlling whether the object of authentication will be managed under 
management of the first system or under management of the second system (Dutcher column 6, 
lines 1-12); and 

a verification step of verifying that authentication of the object of authentication in the 
second system has succeeded at said second authentication step; wherein if an instruction, that 
instructs to switch the object of authentication that is authenticated at the first authentication step 
from management under the first system to management under the second system, has been 
recognized, said control step controls said first authentication step and said second authentication 
step, in order to switch the object of authentication from management under the first system to 
management under the second system, on the condition that the authentication of the object of 
authentication at said second authentication step has been verified at said verification step 
(Dutcher column 20, lines 6-49). 

Dutcher fails to explicitly explain wherein in order not to switch the object of 
authentication from management under the first system to management under the second system, 
if the authentication of the object of authentication at said second authentication step has not 
been verified at said verification step. 

However Cheline et al. discloses wherein in order not to switch the object of 
authentication from management under the first system to management under the second system, 
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if the authentication of the object of authentication at said second authentication step has not 
been verified at said verification step (see fig. 4a and 4b; when access is rejected at step 426, 
the user is allowed to re-enter and re-transmit user name and password i.e. step "F". But 
the system is not disconnecting all connections i.e. the system did not start over and require 
the user to re-request VPN or the VPN request i.e. step "H" is still on and the VPN request 
at step 402 is not invalidates when the access at step 426 is rejected.) 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to modify the teachings of Chcline ct al. within the system of Dutcher 
because they are analogous in multiple corporate server user selection (see par. 0067 and fig. 3A 
element 310 and fig. 6 element 608). One would have been motivated to modify the teachings to 
provide the user the current service when the request for the second service is not valid. 

As to claim 16, Dutcher discloses an authentication apparatus comprising: 

an input unit adapted to input authentication information of an object of authentication 
(Dutcher column 5, lines 5-8); 

a first authentication unit adapted to authenticate whether an object of authentication has 
access right to a first system using the authentication information of the object of authentication 
that has been input by said input unit, and allowing the object of authentication to access the first 
system if authentication succeeds (Dutcher Figure 4); 

a second authentication unit adapted to authenticate whether the object of authentication 
has access right to a second system using the authentication information of the object of 
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authentication that has been input by said input unit, and allowing the object of authentication to 
access the second system if authentication succeeds (Dutcher column 5, lines 22-31); 

a control unit adapted to control whether the object of authentication will be managed 
under management of the first system or under management of the second system (Dutcher 
column 6, lines 1-12); and 

a verification unit adapted to verify that authentication of the object of authentication in 
the second system by said second authentication unit has succeeded; wherein if an instruction, 
that instructs to switch the object of authentication that is authenticated at the first authentication 
step from management under the first system to management under the second system has been 
recognized, said control unit controls said first authentication unit and said second authentication 
unit, in order to switch the object of authentication from management under the first system to 
management under the second system, on the condition that the authentication of the object of 
authentication by said second authentication unit has been verified by said verification unit 
(Dutcher column 20, lines 6-49). 

Dutcher fails to explicitly explain wherein in order not to switch the object of 
authentication from management under the first system to management under the 
second system, if the authentication of the object of authentication by said second authentication 
unit has not been verified by said verification unit. 

However Cheline et al. discloses wherein in order not to switch the object of 
authentication from management under the first system to management under the 
second system, if the authentication of the object of authentication by said second authentication 
unit has not been verified by said verification unit (see fig. 4a and 4b; when access is rejected 
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at step 426, the user is allowed to re-enter and re-transmit user name and password i.e. step 
"F". But the system is not disconnecting all connections i.e. the system did not start over 
and require the user to re-request VPN or the VPN request i.e. step "H" is still on and the 
VPN request at step 402 is not invalidates when the access at step 426 is rejected.) 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to modify the teachings of Cheline et al. within the system of Dutcher 
because they are analogous in multiple corporate server user selection (see par. 0067 and fig. 3A 
element 310 and fig. 6 element 608). One would have been motivated to modify the teachings to 
provide the user the current service when the request for the second service is not valid. 

As to claim 19, Dutcher discloses an authentication program stored in a computer- 
readable storage medium comprising: 

code for implementing an input step of inputting authentication information of an object 
of authentication (Dutcher column 5, lines 5-8); 

code for implementing a first authentication step of authenticating whether an object of 
authentication has access right to a first system using the authentication information of the object 
of authentication that has been input at said input step, and allowing the object of authentication 
to access the first system if authentication succeeds (Dutcher Figure 4); 

code for implementing a second authentication step of authenticating whether the object 
of authentication has access fight to a second system using the authentication information of the 
object of authentication that has been input at said input step, and allowing the object of 
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authentication to access the second system if authentication succeeds (Dutcher column 5, lines 
22-31); 

code for implementing a control step of controlling whether the object of authentication 
will be managed under management of the first system or under management of the second 
system (Dutcher column 6, lines 1-12); and 

code for implementing a verification step of verifying that authentication of the object of 
authentication in the second system has succeeded at said second authentication step; wherein if 
an instruction, that switches the object of authentication that is authenticated at the first 
authentication step from management under the first system to management under the second 
system- has been recognized, said control step controls said first authentication step and said 
second authentication step, in order to switch the object of authentication from management 
under the first system to management under the second system, on the condition that the 
authentication of the object of authentication at said second authentication step has been verified 
at said verification step (Dutcher column 20, lines 6-49). 

Dutcher fails to explicitly explain wherein in order not to switch the object of 
authentication from management under the first system to management under the second system, 
if the authentication of the object of authentication at said second authentication step has not 
been verified at said verification step. 

However Cheline et al. discloses wherein at said verification step, and in order not to 
switch the object of authentication from management under the first system to management 
under the second system, if the authentication of the object of authentication at said second 
authentication step has not been verified at said verification step, (see fig. 4a and 4b; when 
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access is rejected at step 426, the user is allowed to re-enter and re-transmit user name and 
password i.e. step "F". But the system is not disconnecting all connections i.e. the system 
did not start over and require the user to re-request VPN or the VPN request i.e. step "H" 
is still on and the VPN request at step 402 is not invalidates when the access at step 426 is 
rejected.) 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to modify the teachings of Cheline et al. within the system of Dutcher 
because they are analogous in multiple corporate server user selection (see par. 0067 and fig. 3A 
element 310 and fig. 6 element 608). One would have been motivated to modify the teachings to 
provide the user the current service when the request for the second service is not valid. 

As to claim 5, Dutcher discloses the authentication apparatus according to claim 1, 
wherein each of said plurality of authentication mechanisms has: a storage unit that has 
registered authentication information of an object of authentication; and an authentication 
determination unit which, in a case where entered authentication information of a user has been 
registered in said storage unit, is for authenticating this object of authentication (Dutcher column 
3, lines 16-19). 

As to claim 6, Dutcher discloses the authentication apparatus according to claim 1 , 
further having a start-up unit for starting up an authentication mechanism that has been registered 
as an effective authentication mechanism by said registration unit (Dutcher column 5, lines 8- 
21). 
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As to claim 11, Dutcher discloses Ah the authentication method according to claim 7, 
wherein each of said plurality of authentication mechanisms has a storage unit that registers 
authentication information of an object of authentication (Dutcher column 17, lines 67), and said 
method further has an authentication determination step which, in a case where entered 
authentication information of an object of authentication has been registered in said storage unit, 
is a step of authenticating this object of authentication (Dutcher column 3, lines 16-19). 

As to claim 12, Dutcher discloses An the authentication method according to claim 7, 
further having a start-up step of starting up an authentication mechanism that has been registered 
as an effective authentication mechanism at said registration step (Dutcher column 5, lines 8-21). 

As to claim 14, Dutcher discloses An the authentication method according to claim 13, 
wherein said control step controls said first authentication step in such a manner that the object 
of authentication is excluded from management at said first authentication step in a case where it 
is verified at said verification step that the object of authentication has been authenticated at said 
second authentication step (Dutcher column 9, lines 20-26). 

As to claim 17, Dutcher discloses An the authentication apparatus according to claim 16, 
wherein said control unit controls said first authentication unit in such a manner that the object of 
authentication is excluded from management by said first authentication unit in a case where it is 
verified by said verification unit that the object of authentication has been authenticated by said 
second authentication unit (Dutcher column 9, lines 20-26). 



12. Claims 3, 4, 9, 10, 15, and 18 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over US 6021496 (Dutcher) (Applicant's IDS) and Cheline et al. 20030055990 
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as applied to claims 1, 7, 13, and 16 above, and in view of US 20020087894 ( Foley) 
(Applicant's IDS). 

As to claim 3, Currently Amended) Dutcher discloses An the authentication apparatus 
according to claim 1 . Dutcher and Cheline et al. fail to teach wherein said input unit reads a card 
on which authentication information of an object of authentication has been recorded and inputs 
said authentication information. 

However, Foley discloses wherein said input unit reads a card on which authentication 
information of an object of authentication has been recorded and inputs said authentication 
information (Foley page 4, paragraph 003 1). 

It would be obvious to one of ordinary skill in the skill in the art at the time of the 
applicant's invention that smart cards were used to carry authentication information (Foley page 
4, paragraph 0031). 

As to claim 4, the combination of Dutcher and Cheline et al. disclose the authentication 
apparatus according to claim 1 . The combination fails to teach wherein said input unit inputs the 
authentication information using a web browser. 

However, Foley discloses wherein said input unit inputs the authentication information 
using a web browser (Foley page 4, paragraph 0031). 

It would be obvious to one of ordinary skill in the skill in the art at the time of the 
applicant's invention that web browsers were used to input authentication information into the 
system the user is trying to gain access to (Foley page 4, paragraph 003 1). 

As to claim 9, the combination of Dutcher and Cheline et al. disclose the authentication 
method according to claim 7. The combination fails to teach wherein a card on which 
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authentication information of an object of authentication has been recorded is read and said 
authentication information is input at said input step. 

However, Foley discloses wherein a card on which authentication information of an 
object of authentication has been recorded is read and said authentication information is input at 
said input step (Foley page 4, paragraph 003 1). 

It would be obvious to one of ordinary skill in the skill in the art at the time of the 
applicant's invention that web browsers were used to input authentication information into the 
system the user is trying to gain access to (Foley page 4, paragraph 0031). 

As to claim 10, the combination of Dutcher and Cheline et al. disclose the authentication 
method according to claim 7. The combination fails to teach wherein the authentication 
information input by a web browser at said input step. 

However, Foley discloses wherein the authentication information input by a web browser 
at said input step (Foley page 4, paragraph 0031). 

It would be obvious to one of ordinary skill in the skill in the art at the time of the 
applicant's invention that web browsers were used to input authentication information into the 
system the user is trying to gain access to (Foley page 4, paragraph 003 1). 

As to claim 15, the combination of Dutcher and Cheline et al. disclose the authentication 
method according to claim 13. The combination fails to teach wherein said first authentication 
step authenticates user-level access privilege, and said second authentication step manages 
administrator 4evel access privilege. 
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However, Foley discloses wherein said first authentication step authenticates user-level 
access privilege, and said second authentication step manages administrator-level access 
privilege (Foley page 3, paragraph 0026). 

It would be obvious to one of ordinary skill in the skill in the art at the time of the 
applicant's invention that if both a user and a host can select a different level of authentication 
then the first step could be user-level and the second step could be administrator-level (Foley 
page 3, paragraph 0026). 

As to claim 18, the combination of Dutcher and Cheline et al. disclose the authentication 
apparatus according to claim 16. The combination fails to teach wherein said first authentication 
unit authenticates user-level access privilege, and said second authentication unit manages 
administrator-level access privilege. 

However, Foley discloses wherein said first authentication unit authenticates user-level 
access privilege, and said second authentication unit manages administrator-level access 
privilege (Foley page 3, paragraph 0026). 

It would be obvious to one of ordinary skill in the skill in the art at the time of the 
applicant's invention that if both a user and a host can select a different level of authentication 
then the first step could be user-level and the second step could be administrator-level (Foley 
page 3, paragraph 0026). 

Conclusion 

13. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to ELENI A. SHIFERAW whose telephone number is (571)272- 
3867. The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser R. Moazzami can be reached on (571) 272-4195. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Eleni A Shiferaw/ 
Examiner, Art Unit 2436 



